Outdated Gssproxy version

ygorre · August 16, 2024, 3:12pm

Hello,

I am using flatpak apps and some Kerberos-protected services. According to some research, recent gssproxy versions are needed for it to work.

The package version available in tumbleweed/aeon repositories is 0.8.4, the most recent one is 0.9.2 (available since Oct/2023). The minimum version with user proxy function (needed for flatpaks to work) is 0.9.0. Why is this package not updated already?

A "usermode" to use gssproxy with flatpaks

opened 08:08PM - 03 May 22 UTC

closed 04:05PM - 23 May 22 UTC

simo5

enhancement

Flatpaks are a way to get user applications (generally GUI) package in a operati…ng system agnotic way, and with some isolation for the user session. This also means flatpaks have difficulty dealing with GSSAPI as it often relies on the host's krb5 configuration, for default realm and other configs. Using gssproxy for privilege separation would also mean the host krb5 config could be used, and the TGT will not be leaked in the flatpak environment. This calls for a simplified user mode, where gssproxy is run as a user and can itself be intercepted by the host gss-proxy if needed.

Thanks.

malcolmlewis · August 16, 2024, 3:16pm

@ygorre Hi and welcome to the Forum
I suspect lack of use by other users, maintainer busy with other things etc. You can branch this package and update/test and submit, if inclined?

system · September 15, 2024, 3:17pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.